From 2d09901afbf24fb9f635530662ade3647619419e Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Thu, 3 Sep 2026 10:33:47 -0700 Subject: [PATCH] docker latest: keep the dispatch tag out of the manifest script too The step predates signing, but the job now holds the OIDC identity. Claude-Session: https://claude.ai/code/session_01A5zMqzaUg1Snur4Yg8xJGa --- .github/workflows/container_latest.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/container_latest.yml b/.github/workflows/container_latest.yml index 4702cc589..771e92545 100644 --- a/.github/workflows/container_latest.yml +++ b/.github/workflows/container_latest.yml @@ -489,9 +489,10 @@ jobs: sudo mv crane /usr/local/bin/ crane version - name: Create and push manifest + env: + BASE_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }} run: | SUFFIX="${{ steps.config.outputs.tag_suffix }}" - BASE_TAG="${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }}" # Create manifest on GHCR first (no rate limits) echo "Creating GHCR manifest (no rate limits)..."